senior-security

原文涵盖的主题

• Senior Security Engineer — Threat Modeling + Security Router
• Routing Table (read this first)
• What This Skill Owns: STRIDE Threat Modeling
• Workflow
• STRIDE per Element Matrix
• References (load on demand)

This skill does exactly one job itself — STRIDE/DREAD threat modeling (plus a quick secret scan) — and routes every other security request to the specialist skill that owns that lane. Do not duplicate sibling content here; route instead. | The user wants... | Route to | Why that skill owns it | |---|---|---| | Vulnerability assessment, pen-test methodology, OWASP Top 10 testing | ../security-pen-testing/ | Ships vulnerabilityscanner.py + dependencyauditor.py with exit-code contracts | | Incident triage, SEV classification, forensics, containment | ../incident-response/ | SEV1–SEV4 taxonomy, NIST SP 800-61 phases, incidenttriage.py | | Production outage command (non-security incidents) | ../incident-commander/ | Severity classifier + timeline + postmortem tools | | Security monitoring, CVE triage SLAs, compliance checks (SOC 2 etc.), security headers | ../senior-secops/ | securityscanner.py + compliancechecker.py, CVE SLA table | | Hostile/adversarial code review | ../adversarial-reviewer/ | 3-persona review with BLOCK/CONCERNS/CLEAN verdict | | Secure code review as part of general review | ../code-reviewer/ | Language dispatch + regression fixtures | | Cloud IAM escalation paths,

这里只展示节选，请以完整原文和当前要求为准。